
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: Yd7c9gW0wW/e9vIkOeJz+VD/IPa+ZcH4M+i+aXXId3k=
Subject key identifier: 2A:27:93:B9:66:E6:E3:73:BF:83:F5:F2:59:29:3B:6F:63:DC:7C:26
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 0199FBEB60F430544269CA4DA829404DD906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: Ot8mJD6YYGK1vOqVI68fjqlBECcMn9+s2IrQ6+6O2OM=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:60:f4:30:54:42:69:ca:4d:a8:29:40:4d:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=2a2793b966e6e373bf83f5f259293b6f63dc7c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:23:4f:34:7b:74:87:bb:db:b4:81:f7:1f:
b9:3d:3b:26:49:44:50:e7:7d:a1:bb:0e:e5:22:b2:
6c:57:9b:8e:54:3a:09:ce:27:d7:17:cb:43:8e:9c:
6d:de:db:cd:90:a9:86:61:2f:d0:00:d4:8c:85:25:
2e:f2:bd:86:7f:6b:c0:95:10:60:9f:05:bc:dd:e5:
e7:66:5a:1d:d2:18:c7:3d:0a:10:89:67:5e:7a:e0:
da:0d:75:11:0d:48:be:91:76:b2:35:5c:94:02:03:
1d:b4:00:89:eb:fb:90:9f:41:1d:9a:c1:d1:ed:42:
42:ff:12:23:5d:99:e8:c4:fb:13:49:cb:2b:e7:e4:
ea:36:36:09:ef:17:e1:6d:8f:6c:9c:47:3b:60:22:
31:8e:80:cb:01:d2:d2:da:32:a4:0a:80:2c:0d:45:
33:07:15:95:75:e5:93:a1:9e:73:67:0d:36:f7:8c:
e7:b8:d6:54:30:15:0e:12:93:51:f1:18:5c:9c:91:
35:00:6e:37:fb:12:f9:e0:88:e1:8c:01:a1:9b:31:
27:1a:9d:8d:6a:3c:15:b7:31:ce:28:11:22:aa:a3:
ca:2c:7a:39:06:2f:f4:86:12:3d:cb:e7:f7:37:e0:
ea:6a:70:e5:a0:0b:cd:2a:cf:54:18:68:45:20:89:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:93:B9:66:E6:E3:73:BF:83:F5:F2:59:29:3B:6F:63:DC:7C:26
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:2c:b7:e4:45:a9:cb:c2:2b:cf:47:de:76:6b:e6:6b:01:
29:22:1c:20:f8:a6:cb:f2:f2:26:e5:8d:77:a7:ac:86:c4:f4:
de:24:cb:cb:00:b6:ba:4a:a6:8a:14:a5:0b:d3:bf:4d:2b:c1:
44:1c:e5:1a:5a:5a:32:71:90:74:13:2a:49:c8:52:78:3f:e2:
ac:ac:26:89:37:04:6e:04:c6:75:5f:51:89:90:32:4e:fd:2b:
fb:78:97:45:8b:a7:e7:e9:1a:01:55:07:dc:c4:ab:fb:b0:ed:
19:20:d7:36:47:53:5a:b3:34:89:4e:49:a7:09:cb:a3:aa:e4:
0b:7c:82:cc:f2:20:d9:0b:a5:d8:fd:80:37:45:24:dc:22:eb:
3a:48:43:2a:d4:82:2f:b0:8d:6c:5d:13:f5:c4:53:34:bb:ef:
be:0f:ec:7f:f9:ef:50:4f:4e:fd:a4:cf:ef:48:31:e4:19:2d:
85:c7:f2:74:52:e2:f0:37:45:d7:7f:05:56:65:8d:ba:bf:83:
a4:16:bc:5c:82:81:e7:79:78:9d:61:9d:a2:49:2a:54:50:a5:
73:c1:a6:9d:54:74:c4:a9:c3:9d:e6:97:f1:a1:ba:7c:f9:7e:
b7:d7:5a:41:86:1e:60:88:9d:45:e1:f9:7b:35:0c:df:3d:13:
f3:2f:6b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762D0MFRCacpNqClATdkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUxMDE5MTAwMjEwWhcNMjUxMDIwMTAwMjEwWjAzMTEwLwYDVQQD
EygyYTI3OTNiOTY2ZTZlMzczYmY4M2Y1ZjI1OTI5M2I2ZjYzZGM3YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj8jTzR7dIe727SB9x+5PTsmSURQ
532huw7lIrJsV5uOVDoJzifXF8tDjpxt3tvNkKmGYS/QANSMhSUu8r2Gf2vAlRBg
nwW83eXnZlod0hjHPQoQiWdeeuDaDXURDUi+kXayNVyUAgMdtACJ6/uQn0EdmsHR
7UJC/xIjXZnoxPsTScsr5+TqNjYJ7xfhbY9snEc7YCIxjoDLAdLS2jKkCoAsDUUz
BxWVdeWToZ5zZw0294znuNZUMBUOEpNR8RhcnJE1AG43+xL54IjhjAGhmzEnGp2N
ajwVtzHOKBEiqqPKLHo5Bi/0hhI9y+f3N+DqanDloAvNKs9UGGhFIIkdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFConk7lm5uNzv4P18lkpO29j3HwmMB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUost+RF
qcvCK89H3nZr5msBKSIcIPimy/LyJuWNd6eshsT03iTLywC2ukqmihSlC9O/TSvB
RBzlGlpaMnGQdBMqSchSeD/irKwmiTcEbgTGdV9RiZAyTv0r+3iXRYun5+kaAVUH
3MSr+7DtGSDXNkdTWrM0iU5JpwnLo6rkC3yCzPIg2Qul2P2AN0Uk3CLrOkhDKtSC
L7CNbF0T9cRTNLvvvg/sf/nvUE9O/aTP70gx5BkthcfydFLi8DdF138FVmWNur+D
pBa8XIKB53l4nWGdokkqVFClc8GmnVR0xKnDneaX8aG6fPl+t9daQYYeYIidReH5
ezUM3z0T8y9rDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:33 2025 by rpki-client